Data Access and Stewardship

#Treat access as a governed decision, not a default

WHO's data principles say data should be shared when it is safe and ethical to do so, and that legitimate reasons for not sharing should come with clear guidance on other possible access routes. The principles were written to govern WHO's own data work, but WHO publishes them for Member States and collaborators to use.

Stewardship means being able to explain why a particular use is appropriate, not simply holding data or saying yes to requests. WHO's separate data policy shows what this looks like in practice: defined terms for what may be used, anonymization before wider release, and acknowledgement of the countries that provided data. This page is general education; it is not legal advice, and Mynd does not grant or broker access to health data.

Evidence: WHO: data principles / WHO: data policy on use and sharing

#Balance rights and interests explicitly

A 2021 WHO Europe report describes how data protection and cybersecurity laws shape health information systems and public health work. It frames the core task as balancing the rights of data subjects against other interests, including the right to health and public health in general, and it treats secondary use of data for public health purposes as a situation where that balancing must be done openly.

Ask whose rights and interests a proposed use affects, and what oversight exists. Consent is central but not the whole analysis: WHO's principles note that informed consent is almost always needed for research, while routine public health surveillance is treated differently. Rules differ by country and setting, so a general principle never replaces the applicable law or an ethics review.

Evidence: WHO Europe (2021): personal data protection in health information systems / WHO: data principles

#Record provenance, purpose and limits before reuse

WHO's principles call for transparency about how data are collected, used and shared, including complete metadata describing provenance, scope, limitations, traceability and intended reuse. They also point to scientific data standards such as FAIR for data management and GATHER for reporting health estimates.

Before reusing a dataset, check that its origin, collection conditions and permitted uses are documented, and keep those conditions attached to anything derived from it. WHO's own policy shows boundaries too: it excludes biological samples, emergency-context data and clinical trial data, which follow other rules. A documented provenance trail is a starting requirement, not evidence that a specific reuse is permitted or clinically valid.

Evidence: WHO: data principles / WHO: data policy on use and sharing

Source note

The sections above were checked against the linked sources. No clinical review has been performed. This is general research education, not a clinical guideline.